Systems and methods for prevention of unauthorized access to resources of an information system

Abstract

An information security system prevents unauthorized access to resources of an information system. The information security system includes a fingerprint scanner that provides fingerprint data, a radio transceiver that stores encrypted data including fingerprint data from authorized users in a first portion and second data in a second portion, and a hub device that receives the encrypted data and the fingerprint data associated with the scanned fingerprint of a user, decrypts the first portion of the encrypted data to provide decrypted fingerprint data, compares the decrypted fingerprint data with the fingerprint data associated with the scanned fingerprint of the user, identifies the user as an authorized user when the decrypted fingerprint data matches the fingerprint data associated with the scanned fingerprint of the user, and provides the second data to the third party device via the second data interface when the user is identified as the authorized user.

What is claimed is: 
     
       1. A method to restrict use of encrypted data, the method comprising:
 storing on a cell phone data indicative of fingerprints of one or more authorized users of the cell phone; 
 storing on the cell phone encrypted information; 
 transmitting wirelessly with the cell phone the encrypted information stored on the cell phone directly to a first device using one of infrared-based communication and radio frequency-based communication, the first device including at least one computing device comprising computer hardware; 
 reading a fingerprint of a user with a fingerprint scanner included on the cell phone; 
 generating user fingerprint data indicative of the read fingerprint of the user; 
 comparing, with the first device, the user fingerprint data indicative of the read fingerprint of the user with the stored data indicative of the fingerprints of the one or more authorized users of the cell phone in response to transmitting the encrypted information to the first device and generating the user fingerprint data; 
 determining, with the first device, that the comparison of the user fingerprint data with the stored data indicative of the fingerprints of the one or more authorized users of the cell phone indicates that the user fingerprint data matches at least one fingerprint in the stored data indicative of fingerprints of the one or more authorized users of the cell phone; 
 after said determining that the comparison indicates that the user fingerprint data matches the at least one fingerprint in the stored data, determining, with the first device, that the user is an authorized user of the one or more authorized users of the cell phone; 
 after said determining that the user is the authorized user, authorizing, with the first device, use of the encrypted information; and 
 receiving wirelessly a confirmation with the cell phone directly from the first device using one of the infrared-based communication and the radio frequency-based communication, the confirmation indicating that the use of the encrypted information has been completed, the confirmation including at least one data structure comprising data associated with the use of the encrypted information. 
 
     
     
       2. The method of  claim 1  further comprising adding a one-way hash algorithm identifier to the confirmation. 
     
     
       3. The method of  claim 2  further comprising applying the one-way hash algorithm to the confirmation. 
     
     
       4. The method of  claim 3  further comprising encrypting the hashed confirmation with a key to provide an encrypted record. 
     
     
       5. The method of  claim 4  further comprising attaching the encrypted record to the confirmation to create a consolidated information file. 
     
     
       6. The method of  claim 5  further comprising storing in the cell phone the consolidated information file.